Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File:                     O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier:          r9WPA821zdSuUEfAYl8NXahVzwgEt4FkdPZFFFBDK7U=
Subject key identifier:   CB:D7:9B:65:EC:7E:53:EC:8B:EC:D0:27:0F:B7:05:D4:30:22:7D:6F
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer:       /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial:       01962E2B19B6CC927E35532F564C0CBAE904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number:          072B
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
                          2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
                          3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: kTm6/byQWOXdCrjGmcF+/dWZARtpjyRmjO2f84+YfJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:b6:cc:92:7e:35:53:2f:56:4c:0c:ba:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=cbd79b65ec7e53ec8becd0270fb705d430227d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:b1:5a:4c:f1:d0:33:68:56:b6:94:d3:6d:
                    29:39:68:91:fa:20:da:a1:94:e3:e9:9e:0e:85:be:
                    04:c1:57:e5:5a:3b:e4:b3:06:3c:5b:3d:4b:5d:32:
                    04:55:c2:12:95:a8:bb:f1:af:31:71:73:78:6b:63:
                    a6:52:d8:a6:51:c0:ef:17:5d:e7:f9:26:39:f9:27:
                    19:53:e3:b0:4c:74:fa:10:86:e2:21:0a:8d:5b:2c:
                    1b:0d:60:8b:53:c6:77:9a:e9:50:ff:86:e6:81:97:
                    95:d6:42:d2:fd:f0:36:da:de:e7:e0:df:d2:22:5b:
                    39:17:3a:a3:cb:f0:26:2b:20:e2:23:a9:35:67:ac:
                    76:9e:49:54:35:7c:02:d2:03:2c:18:1a:19:a0:6e:
                    61:24:2c:6e:b2:b2:64:03:06:70:b5:07:5f:dc:a5:
                    cb:c7:29:ac:7d:09:bf:73:4c:62:cd:01:df:9a:ff:
                    31:54:92:62:7c:fe:b4:09:43:01:66:f0:f2:a5:0f:
                    7a:11:85:8d:42:df:aa:0f:b1:a8:96:16:87:37:52:
                    df:cf:db:d0:05:e0:97:c5:a5:cd:9e:1f:57:07:0f:
                    d9:8c:21:29:41:13:a5:dc:0b:7e:bf:5c:a4:c1:b8:
                    5e:2a:d9:36:38:b0:3b:79:4d:ca:9d:96:87:40:58:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D7:9B:65:EC:7E:53:EC:8B:EC:D0:27:0F:B7:05:D4:30:22:7D:6F
            X509v3 Authority Key Identifier:
                keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:26:7e:b2:f8:ce:c0:86:e5:e3:0e:a5:70:04:b9:20:5d:
         65:37:c5:f8:81:04:91:45:d2:d5:eb:89:19:f4:86:97:9c:86:
         74:ff:43:c0:8e:b7:d4:5d:a5:34:f2:60:81:12:c8:65:1f:37:
         d3:16:66:c2:b2:41:5b:06:a1:e4:95:c2:dd:0b:35:7e:a8:47:
         59:96:25:02:23:02:c6:e4:ef:46:6d:9b:f3:c1:b2:d5:35:38:
         59:65:e3:67:49:b1:f8:6a:f7:d4:a2:3d:fb:2d:a8:8a:8e:d9:
         dc:29:74:1d:ed:7c:8f:15:f8:6a:55:2f:e5:cb:b3:16:51:b0:
         36:de:9a:a3:f0:08:2e:89:eb:43:90:f7:5c:77:93:f4:f1:c3:
         a8:6d:68:d6:f2:30:66:0b:45:b6:1a:39:39:a2:21:5b:a0:6c:
         8f:3a:8c:b8:f9:22:6d:f9:ee:54:e0:52:46:e0:76:4f:95:22:
         91:2a:af:00:b7:82:87:7e:20:3f:5c:c1:43:0d:b9:44:54:96:
         62:0b:d5:b4:9a:55:09:80:1b:12:2e:fe:9d:eb:05:ea:1b:69:
         37:8d:b5:8b:ab:90:27:9a:99:aa:1a:aa:c8:ea:b9:26:3f:c9:
         fd:d6:d7:dc:d3:1d:d2:6f:87:a7:0d:e6:ba:b0:a1:f3:03:f9:
         b2:da:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----